Analysis
- max time kernel
130s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
03/06/2024, 10:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sdd-win-7.0.0.340-BETA.exe
Resource
win7-20240221-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
sdd-win-7.0.0.340-BETA.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target sdd-win-7.0.0.340-BETA.exe
- Size 10.6MB
- Sample240603-m1wmesdd35
- SHA256 aaddac0fdb7ff8085bb76def75c828bba229b9a1169a279649957a9c16977cd7
- MD5 71d13ac15c6e9ae4ed302c13c5d15df4
- SHA1 3b673f6892f68dd59c521489e7dcad4a2524a3ba
- SHA512 8dc2b85637d3b7a36a7fdf91be03c3ac4445a7ff13329ed2fd1dc906ca9ac2329d4606fa16b92768b0720e0e6116c6d3947b5b8e521fe3a518b423c29256e07a
- SSDEEP 196608:yUyGvjI0ugyz3bbr2CHsRQq2F89jPzYGCe3Br1IgKjcSkUtm2MFirmAMm9Tg:y67I0ugyjzz6Qqb93H3VO6KtVMFirxMr
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 11 IoCs
pid Process 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe 1144 sdd-win-7.0.0.340-BETA.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\GLC4ECC.tmp
- Size 161KB
- SHA256 9200949ab6f777df957fc524d4733e2cb47b89a209c07d2be57b4c63cecbf766
- MD5 263e81631fb67194dc968dc3f4bdb4e7
- SHA1 2998697c503a542d5cf1e25a0d0df18fcd38d66c
- SHA512 2eb6fd28ba87f193a35f1c4bd4c6ff29495a3c10fea8bfa0506df97fcae5ca16f2617703137ecb32cf6b7dbd3048507dd4d0c7418845cfdce5c43896aec45dbb
- SSDEEP 3072:2mCjwKxGoN9KnL8GGoYMavfrObsJXslyR6J7oo5Gpe/e:NC0K4oNcnL8pdJ3Sb6XjRcGpYe
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\GLF5AA7.tmp
- Size 10KB
- SHA256 166d7156142f3ee09fa69eb617dd22e4fd248aa80a1ac08767db6ad99a2705c1
- MD5 3b2e23d259394c701050486e642d14fa
- SHA1 4e9661c4ba84400146b80b905f46a0f7ef4d62eb
- SHA512 2b792296dffa4e43bc85295dc7691bd29762ce5d9d5eafaa74e199e6a8e5b24aa85d0a1b27776d4719a49b0d29abcf6f240746a209528e608b596b560e5a3b88
- SSDEEP 192:GHil+IWcS5ju90M1hfOENXfzZ7kX65caiPEJd3lBD:J+Dcz9fhtflYqcaiPEJB
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\GLK4EDC.tmp
- Size 33KB
- SHA256 bfe7e013cfb85e78b994d3ad34eca08286494a835cb85f1d7bced3df6fe93a11
- MD5 517419cae37f6c78c80f9b7d0fbb8661
- SHA1 a9e419f3d9ef589522556e0920c84fe37a548873
- SHA512 5046565443cf463b6fa4d2d5868879efc6a9db969bf05e3c80725b99bd091ce062cfe66c5551eb1cc5f00a38f2cfcda1f36fb4d60d9ff816c4ec3107b5a0df40
- SSDEEP 384:8lB+vEr4Ry91G5GkrCiKY4WyWMmqnXDYjESmvmkIKXMoCu+7/U:Hhy91G5GCCiK1mqXr1
- MD5 SHA1 SHA512 SSDEEP